{"id":7058,"date":"2021-03-10T11:14:30","date_gmt":"2021-03-10T02:14:30","guid":{"rendered":"https:\/\/www.secuavail.com\/product\/logstarecollector\/kb\/?p=7058"},"modified":"2024-08-26T15:56:37","modified_gmt":"2024-08-26T06:56:37","slug":"tb-210302_02","status":"publish","type":"post","link":"https:\/\/www.secuavail.com\/kb\/tech-blog\/tb-210302_02\/","title":{"rendered":"Linux Server\u74b0\u5883(CentOS)\u306bSNMPv3\u306e\u76e3\u8996\u8a2d\u5b9a\u3092\u884c\u3046"},"content":{"rendered":"<p>\u5f53\u8a18\u4e8b\u3067\u306f\u3001Linux Server\u74b0\u5883\u306bSNMPv3\u306e\u8a2d\u5b9a\u3092\u6295\u5165\u3059\u308b\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u307e\u3059\u3002<\/p>\n<p>\u4f7f\u7528\u3059\u308b\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u3068net-snmp\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n<p>OS:CentOS7<\/p>\n<p>net-snmp:5.7.2<\/p>\n<h2>SNMPv3\u306e\u8a2d\u5b9a\u65b9\u6cd5<\/h2>\n<ol>\n<li>\u8a2d\u5b9a\u524d\u63d0<br \/>\n\u30fb\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb\u306fMD5\u3001\u6697\u53f7\u5316\u30d7\u30ed\u30c8\u30b3\u30eb\u306fAES128\u3068\u3057\u3066\u3044\u307e\u3059\u3002<br \/>\n<strong><span style=\"color: #ff0000;\">\uff08\u672c\u8a2d\u5b9a\u3092LogStare Collector\u304c\u76e3\u8996\u3059\u308b\u30c7\u30d0\u30a4\u30b9\u306b\u6295\u5165\u3057\u305f\u5834\u5408\u306b\u306f\u3001AES128\u3092\u6697\u53f7\u5316\u30d7\u30ed\u30c8\u30b3\u30eb\u3068\u3057\u3066\u9078\u629e\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\uff09<br \/>\n<\/span><\/strong><span style=\"color: #ff0000;\"><br \/>\n\u30fb\u300creadOnlyNoAuthUser\u300d\u300creadOnlyMD5User\u300d\u300creadOnlyMD5AESUser\u300d\u306fSNMPv3\u306b\u3066\u4f7f\u7528\u3059\u308b\u30e6\u30fc\u30b6\u540d\u3067\u3059\u3002<br \/>\n<\/span><span style=\"color: #ff0000;\">\u3000\u9069\u5b9c\u3001\u8aad\u307f\u66ff\u3048\u3066\u304f\u3060\u3055\u3044\u3002<\/span><\/li>\n<li>net-snmp\u53ca\u3073net-snmp-utils\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002\n<pre class=\"lang:default decode:true\">yum -y install net-snmp\r\nyum -y install net-snmp-utils<\/pre>\n<\/li>\n<li>\u300c\/etc\/snmp\/snmpd.conf\u300d\u30d5\u30a1\u30a4\u30eb\u306e\u672b\u5c3e\u3078\u4ee5\u4e0b\u306e\u901a\u308a\u306b\u8ffd\u8a18\u3057\u307e\u3059\u3002<br \/>\n\uff08\u672c\u8a2d\u5b9a\u3067\u306f\u8aad\u307f\u53d6\u308a\u5c02\u7528\u306e\u30e6\u30fc\u30b6\u3092\u8ffd\u52a0\u3059\u308b\u3053\u3068\u3092\u60f3\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002\uff09\u306a\u304a\u3001\u8a2d\u5b9a\u3059\u308b\u30e6\u30fc\u30b6\u306f\u8a8d\u8a3c\u3001\u6697\u53f7\u5316\u306e\u6709\u7121\u306b\u3088\u308a\u8a2d\u5b9a\u65b9\u6cd5\u304c\u7570\u306a\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>\u8a8d\u8a3c\u3001\u6697\u53f7\u5316\u5171\u306b\u884c\u308f\u306a\u3044\u5834\u5408(noAuthNoPriv)<br \/>\n\u203b\u6700\u5f8c\u306e.1\u306b\u306f\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3055\u305b\u308bOID\u3092\u8a18\u8f09\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">rouser readOnlyNoAuthUser noauth .1<\/pre>\n<\/li>\n<li>\u8a8d\u8a3c\u3092\u884c\u3044\u3001\u6697\u53f7\u5316\u3092\u884c\u308f\u306a\u3044\u5834\u5408(AuthNoPriv)\n<pre class=\"lang:default decode:true\">rouser readOnlyMD5User auth .1<\/pre>\n<\/li>\n<li>\u8a8d\u8a3c\u3001\u6697\u53f7\u5316\u5171\u306b\u884c\u3046\u5834\u5408(AuthPriv)\n<pre class=\"lang:default decode:true\">rouser readOnlyMD5AESUser authpriv .1<\/pre>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>SNMP\u30b5\u30fc\u30d3\u30b9\u306b\u95a2\u308f\u308b\u30d5\u30a1\u30a4\u30eb\u3092\u751f\u6210\u3059\u308b\u305f\u3081\u3001snmpd\u30b5\u30fc\u30d3\u30b9\u3092\u8d77\u52d5\u3055\u305b\u307e\u3059\u3002<br \/>\n\uff08\u65e2\u306b\u8d77\u52d5\u3057\u3066\u3044\u308b\u5834\u5408\u306b\u306f\u3001\u884c\u308f\u306a\u304f\u3066\u69cb\u3044\u307e\u305b\u3093\u3002\uff09<\/p>\n<pre class=\"lang:default decode:true\">systemctl start snmpd<\/pre>\n<\/li>\n<li>\u3053\u306e\u5f8c\u5b9f\u65bd\u3059\u308b\u4f5c\u696d\u306e\u305f\u3081\u3001SNMP\u30b5\u30fc\u30d3\u30b9\u3092\u505c\u6b62\u3055\u305b\u307e\u3059\u3002\n<pre class=\"lang:default decode:true\">systemctl stop snmpd<\/pre>\n<\/li>\n<li>\u00a0\u751f\u6210\u3055\u308c\u305f\u300c\/var\/lib\/net-snmp\/snmpd.conf\u300d\u30d5\u30a1\u30a4\u30eb\u306e\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\u3055\u308c\u3066\u3044\u306a\u3044\u7b87\u6240\u306b\u4ee5\u4e0b\u306e\u901a\u308a\u8ffd\u8a18\u3057\u307e\u3059\u3002\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>\u8a8d\u8a3c\u3092\u884c\u3044\u3001\u6697\u53f7\u5316\u3092\u884c\u308f\u306a\u3044\u5834\u5408(AuthNoPriv)\n<pre class=\"lang:default decode:true\">createUser readOnlyNoAuthUser<\/pre>\n<p>\u306a\u304a\u3001\u4ee5\u4e0b\u306e\u4e8c\u3064\u306e\u30b1\u30fc\u30b9\u306b\u304a\u3044\u3066\u8a18\u8f09\u3059\u308b\u3001\u201d\uff08\u30c0\u30d6\u30eb\u30af\u30a9\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3\uff09\u3067\u56f2\u308f\u308c\u305f\u5024\u306f\u30d1\u30b9\u30ef\u30fc\u30c9\u3068\u306a\u308a\u307e\u3059\u3002<br \/>\n<span style=\"color: #ff0000;\">\u9069\u5b9c\u3001\u9069\u5207\u306a\u5024\u306b\u5909\u66f4\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/span><\/li>\n<li>\u8a8d\u8a3c\u3092\u884c\u3044\u3001\u6697\u53f7\u5316\u3092\u884c\u308f\u306a\u3044\u5834\u5408(AuthNoPriv)\n<pre class=\"lang:default decode:true\">createUser readOnlyMD5User MD5 \"readOnlyMD5User\"<\/pre>\n<\/li>\n<li>\u8a8d\u8a3c\u3001\u6697\u53f7\u5316\u5171\u306b\u884c\u3046\u5834\u5408(AuthPriv)\n<pre class=\"lang:default decode:true\">createUser readOnlyMD5AESUser MD5 \"readOnlyMD5AESUser\" AES \"readOnlyMD5AESPassword\"<\/pre>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>\u8a2d\u5b9a\u8ffd\u52a0\u5f8c\u3001\u5185\u5bb9\u3092\u53cd\u6620\u3055\u305b\u308b\u305f\u3081\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002\n<pre class=\"lang:default decode:true\">systemctl restart snmpd<\/pre>\n<\/li>\n<li>\u5148\u7a0b\u3001\u300c\/var\/lib\/net-snmp\/snmpd.conf\u300d\u30d5\u30a1\u30a4\u30eb\u306b\u8ffd\u8a18\u3057\u305f\u5185\u5bb9\u304c\u8a2d\u5b9a\u306b\u53cd\u6620\u3055\u308c\u3066\u3044\u308b\u306e\u304b\u78ba\u8a8d\u3057\u307e\u3059\u3002<br \/>\n\u8a2d\u5b9a\u304c\u6b63\u3057\u304f\u53cd\u6620\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u306b\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u5185\u306b\u300cusmUser \u300d\u304b\u3089\u59cb\u307e\u308b\u8a2d\u5b9a\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<br \/>\n<span style=\"color: #ff0000;\">\u4ee5\u4e0b\u306f\u5168\u3066\u306e\u30e6\u30fc\u30b6\u3092\u8a2d\u5b9a\u3057\u305f\u5834\u5408\u306e\u8a18\u8f09\u5185\u5bb9\u306b\u306a\u308a\u307e\u3059\u3002<\/span><\/p>\n<pre class=\"lang:default decode:true\">usmUser 1 3 0x80001f8880620b09734b18476000000000 \"readOnlyNoAuthUser\" \"readOnlyNoAuthUser\" ...\r\n\r\nusmUser 1 3 0x80001f8880620b09734b18476000000000 \"readOnlyMD5User\" \"readOnlyMD5User\" ...\r\n\r\nusmUser 1 3 0x80001f8880620b09734b18476000000000 \"readOnlyMD5AESUser\" \"readOnlyMD5AESUser\" ...<\/pre>\n<\/li>\n<li>firewalld\u306b\u3066SNMP\u901a\u4fe1\u3092\u8a31\u53ef\u3057\u307e\u3059\u3002\n<pre class=\"lang:default decode:true \">firewall-cmd --add-service=snmp --permanent<\/pre>\n<\/li>\n<li>firewalld\u306e\u8a2d\u5b9a\u3092\u518d\u8aad\u307f\u8fbc\u307f\u3057\u307e\u3059\u3002\u3002\n<pre class=\"lang:default decode:true\">systemctl reload firewalld<\/pre>\n<\/li>\n<li>snmpd\u30b5\u30fc\u30d3\u30b9\u3092\u518d\u8d77\u52d5\u53ca\u3073\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\uff08\u4efb\u610f\uff09\u3092\u884c\u3044\u307e\u3059\u3002\n<div id=\"crayon-603d92633a7b6106302459-1\" class=\"crayon-line\">\n<pre class=\"lang:default decode:true\">systemctl restart snmpd\r\nsystemctl enable snmpd<\/pre>\n<p>\u4ee5\u4e0a\u3067CentOS\u306b\u3066SNMP\u3092\u5229\u7528\u3059\u308b\u6e96\u5099\u304c\u6574\u3044\u307e\u3057\u305f\u3002<\/p>\n<div>\u203bSNMPv3\u3092\u7528\u3044\u305fLogStare Collector\u306e\u76e3\u8996\u8a2d\u5b9a\u624b\u9806\u306b\u3064\u304d\u307e\u3057\u3066\u306f\u3001\u4ee5\u4e0b\u306e\u8a18\u4e8b\u3092\u3054\u53c2\u7167\u304f\u3060\u3055\u3044\u3002<br \/>\n<a href=\"https:\/\/www.secuavail.com\/kb\/references\/ref-200826_02\/\">\u76e3\u8996\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e\u8a2d\u5b9a<\/a><\/div>\n<\/div>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"\u5f53\u8a18\u4e8b\u3067\u306f\u3001Linux Server\u74b0\u5883\u306bSNMPv3\u306e\u8a2d\u5b9a\u3092\u6295\u5165\u3059\u308b\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u307e\u3059\u3002 \u4f7f\u7528\u3059\u308b\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u3068net-snmp\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002 OS:CentOS7 net-snmp:5. [&hellip;]","protected":false},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[50,2],"tags":[9,22],"class_list":["post-7058","post","type-post","status-publish","format-standard","hentry","category-windows-linux","category-tech-blog","tag-linux","tag-monitorconf"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/7058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/comments?post=7058"}],"version-history":[{"count":38,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/7058\/revisions"}],"predecessor-version":[{"id":7173,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/7058\/revisions\/7173"}],"wp:attachment":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/media?parent=7058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/categories?post=7058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/tags?post=7058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}